Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1121644" data-attributes="member: 32260">Yes, I posted about some weaknesses in the Avast protection:<ol>
<li data-xf-list-type="ol">Avast&#039;s CyberCapture can be skirted around via DLL hijacking.</li>
<li data-xf-list-type="ol">Avast (and some other AVs) do not care about UAC bypasses as much as Microsoft Defender.</li>
<li data-xf-list-type="ol">In older versions of Avast, CyberCapture worked only for files with MOTW.</li>
</ol>For example:[URL unfurl=&quot;true&quot;]https://malwaretips.com/threads/avasts-challenge.129933/post-1110476[/URL]About 15 years ago, I installed Avast on my wife&#039;s computer, but she managed to bypass manually the Hardened Mode to install an application bundled with adware (she is a skilled IT professional but not security-oriented). For the last 10 years, I have used mainly Windows built-in protection. I sometimes install popular AVs (including Avast) on my personal computer. I use them during the trial period to see how they currently work and seek possible incompatibilities with my applications.</blockquote>

[QUOTE="Andy Ful, post: 1121644, member: 32260"] Yes, I posted about some weaknesses in the Avast protection: [LIST=1] [*]Avast's CyberCapture can be skirted around via DLL hijacking. [*]Avast (and some other AVs) do not care about UAC bypasses as much as Microsoft Defender. [*]In older versions of Avast, CyberCapture worked only for files with MOTW. [/LIST] For example: [URL unfurl="true"]https://malwaretips.com/threads/avasts-challenge.129933/post-1110476[/URL] About 15 years ago, I installed Avast on my wife's computer, but she managed to bypass manually the Hardened Mode to install an application bundled with adware (she is a skilled IT professional but not security-oriented). For the last 10 years, I have used mainly Windows built-in protection. I sometimes install popular AVs (including Avast) on my personal computer. I use them during the trial period to see how they currently work and seek possible incompatibilities with my applications. [/QUOTE]

Verification